Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/m9W8D1n2kv9KTyvqc2M02GWg2ts.roa
File: m9W8D1n2kv9KTyvqc2M02GWg2ts.roa (raw, json)
Hash identifier: pwxpb5OU7QU/axb+zTjorys+W0ZLSpL9NuZcP94Jxlw=
Subject key identifier: 9B:D5:BC:0F:59:F6:92:FF:4A:4F:2B:EA:73:63:34:D8:65:A0:DA:DB
Certificate issuer: /CN=4c071bad929e362b062b89c87fa41b5deda4ffc0
Certificate serial: 03E81E9B
Authority key identifier: 4C:07:1B:AD:92:9E:36:2B:06:2B:89:C8:7F:A4:1B:5D:ED:A4:FF:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/m9W8D1n2kv9KTyvqc2M02GWg2ts.roa
Signing time: Sat 01 Jan 2022 14:00:49 +0000
ROA not before: Sat 01 Jan 2022 14:00:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47116
IP address blocks: 31.223.232.0/21 maxlen: 21
185.91.184.0/22 maxlen: 22
93.189.112.0/21 maxlen: 21
37.143.76.0/22 maxlen: 22
2a00:10b8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65543835 (0x3e81e9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c071bad929e362b062b89c87fa41b5deda4ffc0
Validity
Not Before: Jan 1 14:00:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9bd5bc0f59f692ff4a4f2bea736334d865a0dadb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3f:a6:77:be:73:ee:84:8a:80:7c:bb:41:c6:
71:a9:68:91:38:4f:ab:49:a5:a0:5e:0f:67:47:1b:
30:97:58:65:d6:cc:b1:50:74:60:c2:f0:15:70:da:
5f:19:0d:b5:67:78:66:d1:c6:5d:16:49:e7:9f:7d:
e8:61:6f:57:61:3e:0a:c2:6f:41:ec:a1:18:1b:5d:
63:c3:73:5a:fe:23:dc:39:04:de:06:74:ba:54:cf:
d1:97:69:a9:35:2f:ea:b9:6c:29:3c:e7:ad:98:71:
a7:59:c8:39:d5:31:86:4d:de:9b:ed:b3:e3:2b:f7:
35:e1:c1:17:4b:b4:c4:79:cf:11:84:78:35:0f:6b:
7a:c9:7d:61:d4:4d:31:88:fd:e6:ad:c2:63:71:4f:
47:04:bd:67:cb:bf:34:25:e4:59:b2:07:8b:12:95:
96:24:9d:c5:46:7c:e9:de:fb:81:d0:4c:87:33:05:
6f:c3:75:9f:83:fd:a2:a5:37:59:b3:46:46:5a:94:
ae:4c:e8:bb:04:ae:d5:a1:d6:52:89:bb:ac:d9:a7:
07:a5:3f:b4:50:07:0e:f4:98:57:6a:bb:5e:d3:5f:
bb:e7:88:e3:29:2a:e0:b6:65:12:f3:af:d4:5b:7c:
b3:f5:c0:1d:61:61:17:80:e6:a5:15:31:5b:60:33:
ae:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D5:BC:0F:59:F6:92:FF:4A:4F:2B:EA:73:63:34:D8:65:A0:DA:DB
X509v3 Authority Key Identifier:
keyid:4C:07:1B:AD:92:9E:36:2B:06:2B:89:C8:7F:A4:1B:5D:ED:A4:FF:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAcbrZKeNisGK4nIf6QbXe2k_8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/m9W8D1n2kv9KTyvqc2M02GWg2ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/93841b-a526-40e3-8a4f-bc1d9a034593/1/TAcbrZKeNisGK4nIf6QbXe2k_8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.223.232.0/21
37.143.76.0/22
93.189.112.0/21
185.91.184.0/22
IPv6:
2a00:10b8::/32
Signature Algorithm: sha256WithRSAEncryption
70:1a:51:b8:87:6e:85:f1:17:1f:be:f1:fb:9a:43:6d:fa:71:
0c:29:fe:98:db:fc:05:d0:e1:7c:f6:99:3c:35:b9:00:61:4f:
1a:a4:28:11:eb:22:09:c2:ac:3c:eb:ce:1d:d9:d8:87:34:20:
7a:57:d6:11:ba:92:26:e4:52:00:52:85:25:bd:42:de:a4:ae:
b3:b9:f9:94:fb:27:16:43:c0:cc:ed:03:48:ea:f5:e0:83:e4:
8f:91:a2:03:56:a7:37:1d:d7:cf:99:9b:4c:17:f3:01:46:90:
52:e5:2c:a3:62:99:0a:94:7b:be:1f:8b:14:3c:ba:73:d6:e6:
bf:1a:64:71:77:08:a1:ab:54:e4:33:0e:7a:ed:f0:bc:bc:80:
0e:f2:b3:88:bd:5f:c9:fe:95:08:c5:c8:5a:05:78:10:68:07:
68:73:5a:5e:15:7d:33:3f:33:69:1f:48:dc:4d:7f:88:fb:e4:
5f:ec:eb:2e:d2:e2:6c:8f:db:f6:91:c6:00:4b:f9:95:5c:77:
86:a1:d3:56:12:cf:3d:f2:ed:2e:6a:96:ef:15:25:7e:26:e1:
01:75:2c:52:39:8a:e2:c2:17:7b:85:06:1a:96:8e:64:09:79:
67:97:08:1a:e1:32:c5:0b:3e:6a:e8:e7:2b:71:01:d1:88:e7:
26:75:1f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:18 2024 by rpki-client on console-ams.rpki-client.org